meta user
network profile
| bio | website | |
|---|---|---|
| location | London, United Kingdom | |
| age | 42 | |
| visits | member for | 3 years, 11 months |
| seen | Apr 15 at 12:04 | |
| stats | profile views | 137 |
Quite boring, really. Have faffed about with computers since the mid-80s, have worked as a network engineer, unix sysadmin and (occasionally) developer.
|
Jul 27 |
comment |
IPv4 address to Netmask mapping and Multiple default routes feasibility? I think Linux will, by default, do round-robin load-balancing between default gateways with the same metric. In some situations, this is exactly what you want, in others it will break things horribly. Keeping to a single default gateway or having different metrics is definitely the safe bet. |
|
Jul 26 |
comment |
Small office network labeling Labeling each end of the cable with both pieces of kit it plugs into is a good idea, as long as you relabel the cable as soon as anything changes... |
|
Jul 25 |
answered | Our security auditor is an idiot. How do I give him the information he wants? |
|
Jul 24 |
answered | What are some great network diagram techniques? |
|
Jul 15 |
comment |
web page slow load due to long DNS lookup How frequently do you need to change them? How long is it acceptable that a DNS lookup points to an old IP address after a change? How long in advance do you know that you will need to make a change? Once you have the answers to those questions, picking a number of seconds for the (default) TTL should be not-too-hard. I've seen TTLs in the region of 3600-86400 work fairly well (that allows a client to cache the lookup for 1h-1d) and if you know you have a change coming up, you can always push the TTL down to 600-or-so 1.5 (default) TTLs before you do the change. |
|
Jul 12 |
answered | LAN Traffic Monitoring Tool |
|
Jul 11 |
answered | Finding IP of Network Switch |
|
Jul 8 |
awarded | Synonymizer |
|
Jul 1 |
answered | Steps to take when technical staff leave |
|
Jul 1 |
comment |
Cisco ACL Not Applying You can certainly apply a single ACL both in- and out-bound. I have done it multiple times. Admittedly prima=rily for "tracking" ACLs (with specific "ip permit" statements for what I am interested in, finishing with a blanket "ip permit any any") |
|
Jun 20 |
revised |
bad network adapter takes down entire network? added 1 characters in body |
|
Jun 17 |
comment |
Isolating one router port from the rest By default, the router will happily route traffic between A,B on one side and C on the other. However, broadcast traffic will not pass between the two VLANs. |
|
Jun 17 |
answered | Isolating one router port from the rest |
|
Jun 17 |
answered | bad network adapter takes down entire network? |
|
Jun 15 |
comment |
How to tell if a router traffic shapes? They may modify the TOS/DSCP bits in the IP header and they will ALWAYS modify the TTL. They shouldn't be touching the payload, though (except, possibly, splitting it if teh packet needs to be fragmented and the DF bit isn't set). |
|
Jun 15 |
comment |
Is there a general guideline to setting up Firewall policies for Small Business? It's easier to allow things you know are necessary than to block things you know are bad. Lessens the administrative burden (apart from the initial set-up, but that's painful anyway) and increases security. Since this is, essentially, @uSlackr's answer, I just voted it up, instead of writing a new, duplicate answer. |
|
Jun 14 |
answered | Rate-limiting incoming traffic |
|
May 30 |
awarded | Yearling |
|
May 29 |
revised |
Can ISPs block IP addresses? How feasible is this? Updated answer based on feedback. |
|
May 29 |
answered | Can ISPs block IP addresses? How feasible is this? |
